SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/217836 | US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2022-10-03T16:14:46
Updated: 2022-10-03T16:14:46
Reserved: 2022-10-03T00:00:00
Link: CVE-2013-3578
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-07-15T20:55:03.467
Modified: 2013-07-16T04:00:00.000
Link: CVE-2013-3578
JSON object: View
Redhat Information
No data.